hxxp://google[.]com

Analysis

user interaction
yes
max time kernel
137s
max time network
138s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
18/04/2026, 05:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://google.com
Sample260418-ft93xahs2s

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1264	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134209626771800029"	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3119821332-640943685-2562343641-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
2100	chrome.exe
2100	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe
Token: SeShutdownPrivilege	3860	chrome.exe
Token: SeCreatePagefilePrivilege	3860	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe
3860	chrome.exe

Suspicious use of WriteProcessMemory 19 IoCs

description	pid	Process	procid_target
PID 3860 wrote to memory of 3856	3860	chrome.exe	79
PID 3860 wrote to memory of 4168	3860	chrome.exe	80
PID 3860 wrote to memory of 4168	3860	chrome.exe	80
PID 3860 wrote to memory of 1264	3860	chrome.exe	81
PID 3860 wrote to memory of 2028	3860	chrome.exe	82
PID 3860 wrote to memory of 2028	3860	chrome.exe	82
PID 3860 wrote to memory of 1756	3860	chrome.exe	85
PID 3860 wrote to memory of 1756	3860	chrome.exe	85
PID 3860 wrote to memory of 5076	3860	chrome.exe	86
PID 3860 wrote to memory of 5076	3860	chrome.exe	86
PID 3860 wrote to memory of 772	3860	chrome.exe	87
PID 3860 wrote to memory of 772	3860	chrome.exe	87
PID 3860 wrote to memory of 836	3860	chrome.exe	88
PID 3860 wrote to memory of 836	3860	chrome.exe	88
PID 3860 wrote to memory of 4772	3860	chrome.exe	89
PID 3860 wrote to memory of 3828	3860	chrome.exe	91
PID 3860 wrote to memory of 4732	3860	chrome.exe	92
PID 3860 wrote to memory of 2476	3860	chrome.exe	93
PID 3860 wrote to memory of 2100	3860	chrome.exe	94

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd35f3c728,0x7ffd35f3c734,0x7ffd35f3c740
  2⤵
  PID:3856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,1319468731030050947,7018892384527594189,262144 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  PID:4168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1448,i,2092050572351589539,9352836829734702378,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2476 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1264
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2284,i,16892027100088463285,12621608646377825535,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=2488 /prefetch:13
  2⤵
  PID:2028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3144,i,10667952072647083252,15698792495387277469,2097152 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3152,i,8622409607287286196,6179299880860993325,2097152 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4268,i,17925523107517892086,16049403018005671152,2097152 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4288 /prefetch:9
  2⤵
  PID:772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4668,i,17572692088261727101,7035284312936401683,2097152 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5280,i,13794971283873939354,14418733361302788507,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5644,i,7808180183062158969,7998098965157390608,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5636 /prefetch:14
  2⤵
  PID:3828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5568,i,18375923938372421250,8914156418181188607,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5520 /prefetch:14
  2⤵
  PID:4732
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5308,i,9699529502340007000,14694851554410634875,524288 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:2476
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5472,i,4209097454048365423,1180472949844543359,262144 --field-trial-handle=1936,i,1641334478846527132,3791836576049445639,262144 --variations-seed-version=20260129-170056.646000 --mojo-platform-channel-handle=5504 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2100

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3264

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 dd49bf8784f740ee7b8726132073ed04a231f73e117fc424290dc0bf2fed9281
MD5 b2351a446b35321b5906c88f32195688
SHA1 56cb5c6633fbd9a2cb1688bd90d45c3e6c281b78
SHA512 16e8721e37837b1e5fa68c53a7b451fac9241e2898fd3e3a21ad2276886d610bdbad605e536e0ae43ab701e14e8c756734dbf5069ea533e0c3ea7f471ea9df6f
TLSH
T11DE02BE9D971D82B08FE176960540B46F72013572740494F3F3C810C4FB052B0985D5C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 24fbb6bb72422678450a5e9edf97e958f2817f6b5e574f8b932c543baf31c520
MD5 46fd3592033438c522eea128087c926d
SHA1 8147c53fa9892d1a56c7a7e2d463e14205cb5e91
SHA512 4a309ee5826747cb95bb3e4279f01af5357555d9cfef4498a9ee770dfc43b8bc5623993ab2992cca9f36e8cc8f7a11b4f98de18c5569450e5dc173c5a1f162d6
TLSH
T107E02E24E212F570CB37223A8C4254423BB0382C0200CBDA00DA80B8FEE26B9A111CE0
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 a1b724bc03708a9b977db047cfbe22cfe6db2a96c902525a83efdc145d66ef59
MD5 b9249a9c5f7aba8922d1678e4c08557b
SHA1 7b1f9da17344f494a1f92392db468459dbfb7898
SHA512 c4e25e8e94aaac90c1397dcde600f983fc5f4b9dfbf6c33cb066c09c21d4499e8cbe79466c43980135ca185274cfec5405c284774f00b3b52a2943cd839906c7
SSDEEP 48:YALlqfh9hphMhM2yhiXYafo7EgdKs8rs7gmzsmts6qzsncs1BsIFs14so3YT:D0bPu8sIaaEgdym9hHBf6ooT
TLSH
T140918DF7D3E4852DC91196F49B156F2FCE290624431C3C66C9D4AF5B93E2872E21139E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 e2beb523c6f5ac76b77f9f5f16fb4c2e0d3ff38177c2a818bac249e726483df7
MD5 da6c9942dccff1531eda477be45ff414
SHA1 278b279e3c37330f034b91da265308681e727f52
SHA512 52cfc711fc3e68bfdb44ee171c14091b94e17c73894be5987d730c745903704cc12a5591b12b99bafcba2c1b7445632ca23bf528521d5f4c92798c161d4ff6c9
SSDEEP 192:2Rjr6GdfAEv7ApAPRp21vw2l9qHsb+WNnjpHZ2pv2WgEkw06Aa4VyIsnAUge:2RjrrbsUXI4wJu2SU3ace
TLSH
T1EA42D83EA918793B5CC6C22AFA61B757E7F6102161842E88E7FC8A1C11D79DC321B527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 02fa3748cc960b0ed806669146286ae61d8f8c37c72e1c20fff625c9b568d7c5
MD5 e1d791f76039330e35fa0e1827d639ea
SHA1 a37e7b6749565fdef84e626eb8e8ab5cfd1eaf09
SHA512 4cd2d4ec371de591ed8fc49a3c9c69bf2d80c0d8879044f55af268ee4a35e216538e529304db502c0dc2822c3e20cfadd9949c623d30489800bbc0cdffa3ddcc
SSDEEP 384:2Mjqt7KxkXqKf/pUZNCgVLH2Hfgslo67pLuLcifklXODqt+ErU3sjHG9TDWxSal2:2Aqt7KxkXqKf/pUZNCgVLH2Hfgsq67pU
TLSH
T1B672E8676C0C9D7B0F94C58CD8267E4FADB9024B65ED886483FA582A03D5BDF110A1F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 8ac56fc9d32ee5708c984a6536bcd1582e31d20816517c758e7208c4107378a8
MD5 688fd363505a7550db9be6344a70f0b4
SHA1 a25ca1dc58cb61dabc99bf0a5e1fe491e5b26c5b
SHA512 b97bf4e89e93b547b53f42df0d8fa83e3b0b10b29209299434f605368f301679577d99d47c3716798d8b9d3bb399c85876cc1d1875a1c41b7266b0b4055fdb0d
TLSH
T115B01211C005E611C04702B01582548871146F108B05131153F0B975E8265E240181A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5854b3.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5854b3.TMP
Size 96B
SHA256 f0ac94f26b775b8a8c02423a7b11dca167da6767da52dc931625db2625a781f0
MD5 e727804b1f080031636d53aba4ad7fc7
SHA1 0c67dfec1474a442da6b6f6e7a95d30f90137f44
SHA512 3a34cdcdbc0e74249a664fb0a4285fa5809d50a3e942bc5f6c835383d4f7bb4eda2275db683191375d93aabed0a4de400bb05d6b325fe14962cac9389e04197c
TLSH
T1C1B002A5C226F212C04303F0299A9DE871E1EFA5DE03121293E63A7BDC26A7156651A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 a2dd1cae647ea7f140af4bb77964ce83746dae53a0b5593ac242d014fcc94163
MD5 e458cddc633f739c9c3d578ff932986d
SHA1 560a152687ed2db2ff4b503848ef2ce8992ca371
SHA512 201815664023751cc4306569686fd8ca0dc5204a106829a14dbdb476e8ff0423ac4cd3132acbe24819623364c09a15c3e9c97158bde73cbddf3744baac034c0b
TLSH
T1D1A0023E1269D107E0954FB4A8D2014137B99E3647492345C29A0075EA547C541815E0
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 265d4ea15aa54812c3e4cc75d06160f27cc93045e6cc78c74ff94deb00c9b01b
MD5 f4029b0b96a541d3af5113d0a1508c9c
SHA1 8685aed690949dd92fdd18a6701231b5c3abb8de
SHA512 f29830d6ba46fc3055b02d72ba56ae841e2e0704882a074bd4b43f746e5ccb9b29decd0261bf551bad6627732ba1695dd7a417c4ca5737a54af1ad4e6bb84b04
SSDEEP 1536:RgA3P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:7++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1969312B99C1E7D3523ABD3A6E0079CAC8CE398DE1114557C31C76F1E14BA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 5d6566dba7e4239c8fe2807eb77c8154eb8caac753f4d303eee789d53cdbbff7
MD5 c993e392fcae3f64e4e76e0e3345efb2
SHA1 c824693cf8643d2b615a1820d79cb96a2c007cb8
SHA512 38a4bb10d4a9da613e9cee1b90c1929ada1b162011e85e3f453b74c24e1df7d515f99bf818d30a43d23f2ac455c4997c228d3c717cb84f7b5e5b66b066b51ec3
SSDEEP 1536:Rgq/P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:xH++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1D29302B9581E7D7913ABD6A6D0079C9C4CE38CCE1518647C30C7AF0E14BA3D3A34B9A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 91KB
SHA256 67febff7e7478f95fe227c9f96665dacd0bbb2c09cd353ece0fdfb0ff44099ac
MD5 1d17b3f3358dbd14306cddb275347236
SHA1 0b872696f576ed70633f840ddbd34b78d16f3052
SHA512 124ec6e1ae30b3a0d0b196398a8f8c11be99f1b970afba0c77a4cb10c721d5e66bad0f373a25a9e159daf34abe48e35927e4321624f5b946a1708bd9a22682b3
SSDEEP 1536:kgA3P++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:U++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1C89312B99C1E7D3523ABD3A6E0079CAC8CE398DE1114557C31C76F1E14BA393A34B8A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 90KB
SHA256 7c39de14e059045f5558a6e312f4d02c5b232196a9b63b60d1ac69b7943468e3
MD5 51d8901dc2951cb4c743a7545436d207
SHA1 0938c352ecfa3a32ee5725de4a362ac5762ddec9
SHA512 9a03210bd470729a0f2ac0db8aceb96240f426b19fef901b133c3dfd0cd88d5486f029877ffd9614d1a8859133984f3a88b1f58ab1c76a0139f8af5a2f2fa312
SSDEEP 1536:hZvP++SKG0qRilWUATqUd408KMYbF5ITGkbEKTldfQVHV+Y6zIFNs:P++J3qUQm08KMWF0bFTcVHr6zT
TLSH
T1799312BA591E7D39536AC396D0079CAC8CE3CCCE1514557C30C7AB1E18BA393A30B8E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download